25a69872f8679caabf7028097682a5341d9d69d3c8c6cd0afc3a0bf12688e968 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25a69872f8679caabf7028097682a5341d9d69d3c8c6cd0afc3a0bf12688e968
Size

810KB
MD5

438fcff86216ab1bb61b5c5ced7963a0
SHA1

05dee3cb0277371f4921ac7367a75477949fbcaf
SHA256

25a69872f8679caabf7028097682a5341d9d69d3c8c6cd0afc3a0bf12688e968
SHA512

ad27fdfe2ff68b29ab70f84c9df6aa767f9059c06d302d3c1afb6d2da1ee1621692360f3548eab0752d4e8d04d4beb1878cd23e1aa09b40bee7daa6bd465d7a8
SSDEEP

24576:ddwhUYQ24pbz7NJ6/Wq8OehdIoEjJ1T5:jwqYQ24pbivdeiZ

Score

N/A

Malware Config

Signatures

Files

25a69872f8679caabf7028097682a5341d9d69d3c8c6cd0afc3a0bf12688e968
.exe windows x86

c8b0f27ba220d9b2a9d0d8d074224dbd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenMutexA
SetCurrentDirectoryA
CreateSemaphoreW
SetLastError
SetLastError
GetLogicalDriveStringsW
GetTickCount
GetModuleHandleA
SetLastError
SetLastError
lstrcpyA
SetLastError
MoveFileW
SetLastError
GetFullPathNameW
VirtualProtectEx

riched20

RichEditANSIWndProc
IID_ITextHost
RichEdit10ANSIWndProc
IID_IRichEditOle

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.ndata
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ